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motive to commit DDoS against MedAssets. C Jsaia he did not have any 
further evidence to assist with formulating ] j 


f he would be willing to supply 
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be above 1s technical knowledge and area of responsibility but would assist 
in making an introduction between writer and someone on Neustar's 
information security team who is knowledgeable on the subject 


iter requested a follow up phone call with[ | and[ [once 
ommunicated with his infosec team and was ready to the introduction. b6 
Writer informe Pye 
b7E 
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Date of entry 05/19/2014 


MedAssets, a healthcare performance improvement company located in 
Alpharetta, Ga, was the victim of a DDoS attack which began on 4/21/14 with 
an estimated start time of 1400 hrs. The attack was sustained until 


4/23/14 with an estimated termination time of 0215 hrs. The attack 
achieved a maximum of b6 
tated the mitigation analyst believed the DDoS to be a form of cay 

Estimated loss amount to date is near 

ee ee el stated he was contacted on 4/21/14 by 
or Neustar, Inc. state e 

he had received an update froma b6 
b7C 
b7E 


ater MedAssets was experiencing a sustained DDoS attack. 


ours 


b7C 


via telephone. After being advised of the identity of the interviewing 


Agent and the nature of the interview,[ __| provided the following 
information: 


stated that Neustar, Inc. 
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iter asked and [jit they were seeing any chatter within 
about anyone specific planning a DDoS attack on b7E 
MedAsset ana) [both stated they did not see any chatter 
related to MedAssets. Writer asked if he had any suggestions on 
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